• Topic ID: id_2030484
  • Version: 2.0
  • Date: Sep 13, 2021 2:15:10 AM

CHANGING AN OS ACCOUNT PASSWORD

It is recommended that site user administrators change the default OS user account passwords after every SW installation for root, ctuser and insite.

OS Password Change UI allows user withadministrator or GE service privileges to change OS password for root, ctuser and insite user accounts.

Once software is installed, Site administrator or GE Service user can change the OS Passwords anytime at their discretion. Following are the steps to be followed:

Procedure

  1. Login to EA3 as a user with administrator or GE Service privileges.
  2. From the system utilities Menu, select Service to open the service desktop application.
  3. Select Utilities Tab, select Security Center.

    Figure 1. Service Desktop

  4. On Security Center Dashboard, select OS Password Change from Application Menu.

    Figure 2. Security Center

    note: Application Menu is not displayed when the current user doesn’t have EA3 admin or GE Service role.
  5. Select the OS user account (root, ctuser, insite) from User Name drop down.
  6. Enter the Old Password.
  7. Enter the New Password that complies with rules defined in Password Strength Rules chapter in the New Password field and Retype New Password.
  8. Click Submit. A message will be displayed to indicate that password changed successfully or why the password change was not accepted.

    Figure 3. OS Password Change GUI

    System enforces the following password strength rules:

    1. All passwords must have a minimum of 8 (normal) alphanumeric characters.
    2. All passwords must have at least one uppercase alphabetic character
    3. All passwords must have at least one lowercase alphabetic character
    4. All passwords must have at least one numeric character
    5. All passwords must have at least one non-alphanumeric special character
    6. Passwords must not contain more than three consecutive repeating characters
    7. The default passwords cannot be used

      If new password does not meet the above stated “password strength rules”, the system displays an error message as shown below and the password is not changed.